This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File:                     e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier:          KJJrBZWk4PimewB9+HGrIKcJstFQEcFulDiSuxDGOA4=
Subject key identifier:   AC:D4:72:FA:8A:52:C3:BB:38:48:A5:1D:E0:E7:44:46:72:26:C6:DE
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer:       /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial:       019C432257342581E721CFACDA8130BB40CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number:          07CC
Signing time:             Mon 09 Feb 2026 16:00:49 +0000
Manifest this update:     Mon 09 Feb 2026 16:00:49 +0000
Manifest next update:     Tue 10 Feb 2026 16:00:49 +0000
Files and hashes:         1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: IwEdJkxjnqUCv8vM6SOMPIwcdwgm11kM7N2Z05xqwfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:22:57:34:25:81:e7:21:cf:ac:da:81:30:bb:40:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
        Validity
            Not Before: Feb  9 16:00:49 2026 GMT
            Not After : Feb 10 16:00:49 2026 GMT
        Subject: CN=acd472fa8a52c3bb3848a51de0e744467226c6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:0a:e2:c9:47:d8:84:8b:38:e4:2b:9d:a6:
                    12:82:d5:8b:59:85:5c:89:8e:32:d9:cc:9e:be:c5:
                    40:34:ad:90:e6:f5:60:cf:8d:c7:e2:15:f9:c6:38:
                    de:2f:74:c2:4b:3a:82:6c:60:cd:87:82:bb:67:9f:
                    7a:5c:bd:20:ed:8f:18:79:32:99:f3:86:c3:c4:47:
                    31:20:aa:0e:51:a6:4e:bc:19:a8:16:0e:fb:dc:5f:
                    41:79:10:80:0f:96:2e:02:8b:8f:e2:fe:d5:40:6a:
                    61:19:e2:3f:16:f1:2e:2c:2c:e5:42:aa:50:7d:c8:
                    ef:6b:e0:50:73:27:ff:73:50:56:9f:7a:4d:db:56:
                    98:22:11:6a:33:a6:d8:7f:57:3f:d2:e9:38:3c:a3:
                    db:ba:4a:83:61:25:77:67:b6:c5:6e:52:c4:02:f9:
                    a2:f7:7d:58:97:a1:bf:76:53:ef:f2:58:70:18:ba:
                    87:13:22:9e:4f:e0:6e:b3:ec:0c:ed:e3:c6:6f:b5:
                    38:64:a8:43:d7:94:bf:ce:5c:5a:95:65:6e:46:de:
                    8b:3a:ef:22:50:83:af:10:5e:f0:fd:b1:07:8b:4d:
                    84:65:14:30:b8:25:43:aa:fe:ae:3a:42:ca:9f:7d:
                    fd:3d:80:2f:16:f3:32:e9:26:39:47:51:a3:a8:06:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D4:72:FA:8A:52:C3:BB:38:48:A5:1D:E0:E7:44:46:72:26:C6:DE
            X509v3 Authority Key Identifier:
                keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:36:f2:60:84:19:5d:e0:22:4a:80:d0:88:2c:1e:1e:7c:32:
         f4:62:84:a5:5a:6b:44:49:e9:48:35:ff:f8:15:40:28:46:8e:
         17:04:85:2a:2d:a8:a4:ba:ea:75:c1:1e:c7:55:46:ee:d6:e3:
         fa:3a:83:21:a2:ac:9c:cc:63:f0:68:0a:dc:22:61:1f:86:9e:
         53:f8:a6:a8:26:29:54:88:1e:b7:03:13:5c:db:37:f0:fd:3e:
         5b:b8:cf:18:65:9f:1e:4b:e7:09:34:6a:6e:81:34:91:39:3c:
         e4:60:83:25:9a:a9:8f:83:71:27:24:9f:de:70:2c:84:7d:5b:
         95:8f:de:da:04:c2:6d:44:92:24:ae:07:0e:2b:8d:24:18:76:
         72:b1:3e:25:99:4d:f9:42:4a:de:da:9a:9a:62:40:84:0d:29:
         80:55:9f:82:2a:40:f5:1a:dd:57:a3:c3:e1:5a:80:a5:b4:af:
         cb:3a:3b:51:32:1f:7e:d9:54:38:c0:1d:58:1c:1c:fb:81:ab:
         bb:aa:95:c1:f3:9d:fe:f4:40:00:b3:cd:08:68:4e:0a:86:00:
         5d:3f:c6:77:8d:05:46:03:b1:ce:81:01:2c:70:75:4a:2c:d0:
         bd:9f:ba:18:ba:70:b6:8b:05:7a:f3:2a:5d:5a:55:24:62:50:
         1b:28:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:07 2026 by rpki-client